Xanthe - Docker aware miner

By Vanja Svajcer and Adam Pridgen, Cisco Incident Command NEWS SUMMARY * Ransomware attacks and big-game hunting making the headlines, but adversaries use plenty of other methods to monetize their efforts in less intrusive ways. * Cisco Talos recently discovered a cryptocurrency-mining botnet attack we're calling "Xanthe," which attempted to compromise one of Cisco's security honeypots for tracking Docker-related threats. * These threats demonstrate several techniques of the MITRE ATT&CK

Docker servers hacked in ongoing cryptomining malware campaign

Researchers Disclosed a Cross-Site Search Vulnerability in OpenSea NFT Marketplace

Cryptomining Gold Rush: One Gang Rakes In $7M Over 6 Months

Xanthe挖矿僵尸网络卷土重来- 360CERT

Exposed Devices Used as Botnet to Scan Internet

Docker Image - Keeper Secrets Manager

Azure and Malware Sandboxes - Hakin9 - IT Security Magazine

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) - Johannes B. Ullrich

NVIDIA Graphics Driver Vulnerability Could Lead to Memory Corruption

Missouri Issues Alert Regarding Stolen Health Information Due to IBM MOVEit Data Breach

LATEST: Threat Intelligence Update - December 2020 - Part A

Xanthe - Docker aware miner - Cisco Blogs

Experts Uncover a Full-Featured Information Stealer and Trojan in a Python Package on PyPI

Abcbot - An Evolution of Xanthe - Cado Security

Historical Novels Review Issue 90 (November 2019) by The Historical Novel Society - Issuu